XBadManners

XBadManners CVE Description CVE-2018-16323 is a memory leakage in processing XBM images. After XBM image was converted to another image type you can extract leaked memory bytes from image data. Discovered by d4d. Tool A pretty simple tool for generating CVE-2018-16323 PoC. Directory samples...

AutomatedRoot

AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...

CVE-2026-13714

root@kitploit: Realtyna WPL 5.3.0 - Unauthenticated RCE Exploit Description This exploit targets a critical vulnerability in Realtyna Organic IDX + WPL Real Estate plugin versions prior to 5.3.0. The plugin uses hardcoded credentials and allows unauthenticated file upload leading to Remote Code...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: root@kitploit: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: root@kitploit: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install...

CVE-2020-1938-Exploitation

CVE-2020-1938 Exploitation Apache Tomcat arbitrary JSP upload leading to RCE Description CVE-2020-1938 is a critical vulnerability which impacts Apache Tomcat from 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 ⚠️ This was exploited in a Hack The Box lab. 🔗 Reference: NIST NVD Entry...

PrintNightmare

Critical Vulnerability PrintNightmare CVE-2021-1675, CVE-2021-34527 Currently no solution from Microsoft yet as of 02.07.2021 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Affects all operating system versions server and client Options Disable Print Spooler Adjust ACL Event...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 root@kitploit: • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved root@kitploit: Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run...

winDED

winDED Custom exploit for CVE-2023-38831 using python. Introduction: WinRAR is an archiving software that allows users to create file archives and zipped versions of files and folders so that users can easily transport files/ folders or store them at a compressed size. I mean, you’ve heard of it,...

CVE-2022-28672

CVE-2022-28672 CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying IOC de omisión de autenticación de FortiOS, FortiProxy y FortiSwitchManager CVE-2022-40684 Introducción El reciente CVE FortiOS / FortiProxy / FortiSwitchManager ha sido explotado en la naturaleza. Nos gustar...

CVE-2025-24071-msfvenom

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato for x86 Windows This is a version of ohpe's Juicy Potato privilege escalation exploit modified for x86 Windows. I preserved as much of the code as I could, while making small changes necessary to compile for x86 Windows. Tested successfully on Windows 7 SP1 x86 Build...

CVE-2018-17961

build the image run the container with port forwarding ssh -X into it run evince executeonlybypass.ps check exploit has written into /.bashrc...

CVE-2018-10933

CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...

CVE-2024-34102

CVE-2024-34102 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8, and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML...

CVE-2022-38813

CVE-2022-38813 Veritical Privilege Escalation via user parameter in Blood Donor Management System Using Codeigniter v 1.0 Technical description: Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete t...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2022-42094

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...

CVE-2023-25690

CVE-2023-25690 Description of CVE-2023-25690: Some modproxy configurations on Apache HTTP Server from version 2.4.0 to 2.4.55 allow HTTP Request Smuggling attacks a technique that interferes with the way a website processes HTTP request sequences received from one or more users. These...

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...